Overview

overview

10

Static

static

b01ddbf0bf...6f.exe

windows7-x64

10

b01ddbf0bf...6f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b01ddbf0bff46769347ba59495c22c6f.exe

  • Size

    3.4MB

  • Sample

    220929-lq26sabdcn

  • MD5

    b01ddbf0bff46769347ba59495c22c6f

  • SHA1

    36bb6a7d67ebffb8dc2c903d20594141436de37e

  • SHA256

    6622ecf695d6546c9ce99134a13c485d33691905b4140ca5fbe6d704948cf651

  • SHA512

    6f05570e01fcf9511626cd7d85bc20a32ebd7d9fdd49b52de80ee4ec20fb3f34880a07d0758543630c02b93484e501824a4f0df3bebf6c9b30fb24fc87f16f96

  • SSDEEP

    98304:Mh0ywRz70/W9+68ZBtKe3oWFGNc+sA5loQwMEp+ou/Xf:nyf/W9+DfFGNv5lnEMosf

Score
10/10
xmrigminerupx

Malware Config

Targets

    • Target

      b01ddbf0bff46769347ba59495c22c6f.exe

    • Size

      3.4MB

    • MD5

      b01ddbf0bff46769347ba59495c22c6f

    • SHA1

      36bb6a7d67ebffb8dc2c903d20594141436de37e

    • SHA256

      6622ecf695d6546c9ce99134a13c485d33691905b4140ca5fbe6d704948cf651

    • SHA512

      6f05570e01fcf9511626cd7d85bc20a32ebd7d9fdd49b52de80ee4ec20fb3f34880a07d0758543630c02b93484e501824a4f0df3bebf6c9b30fb24fc87f16f96

    • SSDEEP

      98304:Mh0ywRz70/W9+68ZBtKe3oWFGNc+sA5loQwMEp+ou/Xf:nyf/W9+DfFGNv5lnEMosf

    Score
    10/10
    xmrigminerupx

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks